Privacy Policy
MNJ Medical Ltd
Effective Date: April 2025

1. Introduction

MNJ Medical Ltd is committed to protecting the privacy and security of our patients and website visitors. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

2. Information We Collect

We may collect and process the following types of personal data:

2.1 Personal and Contact Information

  • Full name

  • Date of birth

  • Contact details (email address, phone number, home address)

  • GP Details

2.2 Medical and Health Information

  • Medical history and current health conditions

  • Prescriptions and treatment details

  • Consultation records and clinician notes

  • Any additional health information relevant to your treatment

2.3 Technical Information

  • IP address and device information

  • Website usage data, including cookies and analytics

3. How We Use Your Information

We use your data for the following purposes:

  • To provide medical consultations, prescriptions, and healthcare services

  • To process payments and manage financial transactions

  • To comply with legal and regulatory obligations (e.g., GPhC and NICE guidelines)

  • To communicate with you regarding appointments, prescriptions, and healthcare advice

  • To improve our website and services through analytics and feedback

  • To ensure security and prevent fraud

4. Legal Basis for Processing Your Data

We process personal data under the following legal bases:

  • Consent – Where you have given explicit consent for us to process your data (e.g., marketing communications).

  • Contractual Obligation – Where data processing is necessary for providing healthcare services.

  • Legal Obligation – Where we are required by law to retain or disclose certain information (e.g., regulatory compliance).

  • Legitimate Interest – Where processing is necessary for the improvement of our services or to ensure security.

5. Data Sharing & Third Parties

We may share your data with:

  • Healthcare professionals and pharmacies – To fulfil prescriptions and ensure appropriate care.

  • Regulatory authorities – If required by law or professional guidelines.

  • Payment processors – To process transactions securely.

  • IT service providers – For website maintenance and security.

We will never sell your data to third parties.

6. Data Storage & Security

We take appropriate technical and organisational measures to protect your data, including:

  • Secure electronic record-keeping and encryption.

  • Restricting access to authorised personnel only.

  • Regular security audits and compliance checks.

  • Secure disposal of outdated records in accordance with legal retention periods.

7. Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right to Access – Request a copy of the personal data we hold about you.

  • Right to Rectification – Request correction of inaccurate or incomplete data.

  • Right to Erasure – Request deletion of your data under certain circumstances.

  • Right to Restrict Processing – Request that we limit how we use your data.

  • Right to Data Portability – Request transfer of your data to another service provider.

  • Right to Object – Object to data processing based on legitimate interest.

  • Right to Withdraw Consent – If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@mnjmedical.co.uk.

8. Data Retention

We retain personal data for as long as necessary to:

  • Provide healthcare services and maintain patient records.

  • Comply with legal and regulatory requirements.

  • Resolve disputes and enforce agreements.

Retention periods are determined based on healthcare industry guidelines and legal obligations.

9. Cookies & Website Analytics

Our website uses cookies to enhance user experience and collect analytical data. You can manage cookie preferences through your browser settings.

10. Updates to This Policy

We may update this Privacy Policy periodically. Any significant changes will be communicated via our website.

11. Contact Information

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us:

📧 Email: support@mnjmedical.co.uk

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.